Disabling the WebDAV URL from Portal through portal-ext.properties

Issue

• If any of the users in the portal knows the WebDAV URL, they can configure the same at their end and they can manage the Document Libraries from their local machine itself. Hence, how can the WebDAV URL be restricted?

Environment

• Liferay 6.2 EE

Resolution

• Liferay has provided the property to restrict the access of the WebDAV URL by configuring the below property in portal-ext.proeprties.

  #### WebDAV Servlet
  
  # See the properties "main.servlet.hosts.allowed" and
  
  # "main.servlet.https.required" on how to protect this servlet.
  
  webdav.servlet.hosts.allowed=

  When you looked at the above mentioned "main.servlet.host.allowed" the definition is as follows
  
  # Input a list of comma delimited IPs that can access this servlet
  # Input a blank list to allow any IP to access this servlet
  # SERVER_IP will be replaced with the IP of the host server

  
  For ease:

  webdav.servlet.hosts.allowed=127.0.0.1

  After adding the above property, the WebDAV URL will be accessible only to the above mentioned IP address.

Additional Information

• WebDAV stands for Web-based Distributed Authoring and Versioning and it is used to access and manage the documents and folders belonging to Liferay's Document and media portlet from our local machine. For configuring the same please refer the following link

  https://help.liferay.com/hc/en-us/articles/360018184231-Automatic-Previews-and-metadata-#webdav-access